01 The number of workstations and servers
This is the base of the calculation. Billing is per managed workstation or server, never per user: one person with a laptop and a desktop counts as two units, two people sharing one machine count as one.
A server needs more monitoring than a workstation, so it weighs more in the total.
Check this yourself. Count your powered-on machines, not your employees. That number drives everything else.
02 The service level you choose
Monitoring a fleet, answering your employees' calls, and guaranteeing a response time in writing are three different commitments, and they do not cost the same.
Each level contains the previous one in full, so the price moves in steps rather than through stacked options.
Check this yourself. Ask yourself whether you need a help desk for your staff, or only monitoring that protects your data.
03 The age and condition of the fleet
A fleet of eight-year-old machines with missing updates and overdue patches takes more hours in the first months than a recent, clean one.
That extra cost is temporary, but it is real, and an honest provider names it instead of absorbing it quietly and billing it back another way.
Check this yourself. Look at the average age of your workstations and the last reboot date of your servers.
04 Your compliance obligations
Quebec's Law 25 requires specific measures: an incident register, access management, logging, and rules for sending data outside Quebec. Some industries add their own requirements.
Those measures need tooling and follow-up time, and both show up in the price.
Check this yourself. If your insurer sent you a cyber insurance questionnaire, its questions already outline your required level.
05 The hours you actually work
Covering evening shifts, a weekend, or a plant that runs overnight does not cost the same as covering office hours.
It is not the number of calls that changes, it is the availability you have to fund even when nothing happens.
Check this yourself. Note when your first employee signs in and when your last one shuts down.
06 The number of sites and travel
One office, three branches, and a remote team do not require the same network work, the same links between sites, or the same physical presence.
Distance is not paid every day. It is paid the day someone has to be on site.
Check this yourself. List your addresses, then ask where the person who would travel to you starts from.
07 Line-of-business software and integrations
An accounting system hosted by a third party, a production system, an in-house application: each one adds a piece to understand, monitor, and connect to the rest.
This is often what separates two quotes that looked comparable on workstation count alone.
Check this yourself. Write down your essential software. A small business almost always has more of it than it thinks.